Segregation of  global layout and user Specific  for IW38 with Activity 23

Hi All,
We have issue that users are able to change the Global Layout in IW38 transaction codes, which is causing lot of confusion for other users. Please can anyone help me to do some investigation around how the access to Global Layout and User-Specific layout can be segregated.
  We would like to achieve below things:
1)     Can we control provision access in such way users can only change layout specific to them?
2)     They should not be able to change Global Layout
3)     List of roles having Authorization object S_ALV_LAYO with activity 23.
If anyone already faced this issue, can you please let me know how they resolved it
Thanks in Advance.

Hi David,
> The standard S_ALV_LAYO object is, so far as I know, no use for normal day to day end users as it over-rides the restrictions?
It's up to the business, but ours wanted the managers to set a global layout for all other users to display only... as sort of a standard report.  I agree with you in the challenge of determining who to give the long-term S_ALV_LAYO w/23 global maintenance access.  We used to have this S_ALV_LAYO in every role that contained a report access (honest design mistake), hence that is why we created a separate role contained just S_ALV_LAYO w/ 23 access  --> to managers only. 
In our generic system role that is given to everyone, we have both S_ALV_LAYO (as blank) and F_IT_ALV (as 01, 02) so all non-manager users are able to create/save local layout & still view global layout.
F_IT_ALV activity 70 gives the authority to overwrite other's local layout (the "Manage Layout" access), so we only gave 01  and 02.  Be careful here, as giving 03 (display) will make all other activities inactive.
Best,
Alice

Similar Messages

  • Can't save ALV layout as user-specific

    Hi!
    Whenever I try to save an ALV layout the option User-specific is grayed out, so all variants will be public.
    Users would like to save their own layouts safe from other users, as happens with program variants.
    First of all then, is there any authorization object related to the User-specific option that my roles are missing?
    I read somewhere that 'user-specific' option is controlled by auth. S_ALV_LAYO, ACTVT = 23, yet I have
    this auth object with ACTVT = *.
    Second, if this option was available, would this let users create their own layouts so that other users don't
    overwrite them?
    thanks
    gracias
    xiè xiè

    in the resue FM check the I_SAVE which value are you passing:
    Value range
    ' ' = Display variants cannot be saved
    Defined display variants (such as delivered display variants) can be selected for presentation regardless of this indicator. However, changes cannot be saved.
    'X' = Standard save mode
    Display variants can be saved as standard display variants.
    Saving display variants as user-specific is not possible.
    'U' = User-specific save mode
    Display variants can only be saved as user-specific.
    'A' = Standard and user-specific save mode
    Display variants can be saved both as user-specific and as standard
    variants. Users make their choice on the dialog box for saving the
    display variant.

  • How to create Global password and user information list in Linux

    Hi ,
    OS is : OEL, We have some requirement, we need to create global password and Users information, that location sould be accessable to all users, can any one guide me how to do it in Linux.

    Could you give us a little more details? Are u looking for something like a centralized authentication system? or....what exactly?
    kido

  • Is it possible to patch Global Zone and only specific Non-Global Zones?

    Hi Champs,
    Is it possible to patch Global Zone and only specific Non-Global Zones? Idea is to patch DEV-zones only on the system & test applications and then patch only the STG-zones on same server!
    Not sure if it is possible but just throwing a question...
    Cheers,
    Nitin

    M10vir wrote:
    Yes, if you have branded (non-sparse) zone!Branded zones and sparse zones don't have the relation that you imply. In Solaris 10, native zones can be sparse or whole-root (non-sparse, as you say). Zones that are not native zones are branded zones. Branded zones on Solaris 10 include Solaris Legacy Containers, previously known as Solaris 8 Containers and Solaris 9 Containers. That add-on product allows you to run Solaris 8 and Solaris 9 application environments under a thin layer of virtualization provided by the brands framework. solaris8 and solaris9 branded zones can be patched independently of each other and of the global zone.
    Solaris 11 has no "native zones" - all zones use the brands framework. The "solaris" brand does no emulation and in that respect is very similar to native zones on Solaris 10. Solaris 11 also provides Solaris 10 Zones via the solaris10 brand. This allows zones or the global zone from a Solaris 10 system to be transferred to a Solaris 11 system and run as solaris10 zones. When running on Solaris 11, solaris10 zones can each be patched independently from each other and the Solaris 11 global zone. Technically, Solaris 11 doesn't have patches - it just has newer versions of packages to which the system is updated.

  • Users Guide and Users Manual for iPod Touch 4?

    Has anyone located the PDFs for the "Users Guide" and "Users Manual" for iPod Touch 4? I can't seem to find them.
    TIA
    Judie

    In addition to the "User's Guide" there has also been a PDF "Features Guide" for each version of the iPod touch. (The one iwell provided a link for is not for the 4th generation iPod touch. (The 'at a glance' sketch shows the on/off button on the left. It's on the right on the 4th generation iPod touch.) It's possible Apple hasn't posted it yet. But I appreciate you both for trying. Thank you.

  • HT5731 How can I download my TV episodes to my Macbook Pro. I bought them from my iPad2, and I looked for them with the same AppleID on iTunes Store and they wont download to my iTunes.

    How can I download my TV episodes to my Macbook Pro. I bought them from my iPad2, and I looked for them with the same AppleID on iTunes Store and they wont download to my iTunes.

    What country are you in ? Depending upon what country that you are in then you might be able to redownload them on your Mac's iTunes via the Purchased link under Quicklinks on the iTunes store homepage
    If you're not in a country where TV programmes can be redownloaded then connect the iPad to your Mac's iTunes and use the File > Devices > Transfer Purchases to copy them over from your iPad

  • Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

    Hi,
    Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
    Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign  2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
    IP for communicating with the CAS server which is in a different domain.? 
    Details: 
    1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
    Thanks
    Rajesh Vasudevan

    First, it's not possible. You cannot attach a primary site to an existing CAS.
    Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
    CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
    no functional differences but does add complexity, latency, and additional failure points.
    Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
    As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
    for trouble IMO.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Do not have authorization for access with activity 03 on the InfoProvider

    Hi,
    I have developed new cube & ODS and created new Web Templates based on queries on these Infoproviders.
    I have created new role and adde these templates to menu of this Role.
    In Authorization profile i have used following Authorization objects.
    S_RS_BTMP
    S_RS_COMP
    S_RS_COMP1
    S_RS_ICUBE
    S_RS_ODSO
    In all these objects i hace selected activity 3.
    Infoarea used for these new Cube & ODS is also added and for cube & ODS selection ihave used * (full authorization)
    But when user is opening the web template it is showing error messahe
    "You do not have authorization for access with activity 03 on the InfoProvider ZICXEROX."
    Is there is any authorization object missing in the profile?
    Regards
    SSS

    Dear SSS,
    Have the same problem ' You do not have sufficent  authorization for the infoprovider'. so could you please send the document from my mail id
    [email protected].......
    plaase very very urgent
    Regards
    Ahmed.

  • BADI and User exit for MIGO item and header enhancement

    We want to add three extra fields in MIGO screen for specific movement type 101 . Two fields at item level and one filed at header level .
    Item level fields are independent fields it will store in separate z-table and z-field and dont't have any relation with other table .
    but header field has some relation with quantity field in item level . All the item quantity has to add up in header , Is it possible to add up .
    What are the BADI and user exit need to use for this enhacement and etc required details

    Hi Raghavendra,
    Use BAdI MB_MIGO_BADI.
    It has all the methods that cater your requirement.
    Try to have a design such that you can store the values within the document by enhancing the tables using Append Structures, they surely have a link with the document.
    regards,
    Aabhas K Vishnoi

  • Excel Services and User Specific Data

    Hello,
    I am new to Excel Services.
    I want to retrieve data to Excel Services (at this phase, to prevent it in Excel Web Part) from SQL Server.
    The SQL might hold big amount of data so I think about fetching only the data relevant to each user.
    I configured a pivot table over a data connection with Windows Authentication, and when I refresh it I get the following message "The data connection uses windows authentication and user credentials could not be delegated". I think the Windows
    Authentication is required in order to pass information about the user to the SQL query so it can filter for the relevant data.
    My questions are as follows:
     Can I pass user information from the Excel model file to the SQL server in a way different from Windows Authentication?
    Alternatively, if I retrieve the data unfiltered to Excel Services, and filter only the pivot, will I get the same performance?
    Would the answers change if Excel and/or SharePoint version is changed from 2010 to 2013 or Online/365?
    Any other idea?
    Regards,
    Barak

    Hi,
    According to your post, my understanding is that you wanted to filter Excel Services Data.
    You can you can connect the Excel Web Access Web Part to a Current User Web Part or a Filter Web Part to pass user information. Please refer to:
    Personalized Data in Excel Services
    You will get the same performance.
    You can connect the Excel Web Access Web Part to a Current User Web Part in all versions.
    More information:
    Connecting Dashboard Filters to Excel Services Pivot Table Report Filters
    Thanks,
    Linda Li                
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Linda Li
    TechNet Community Support

  • Logic and User Exit for Availabilty Check in Sales Orders,

    Hi All,
    I have a requirement of creating a Sales order from an Inbound IDOC. Before saving i need to do all the validations for the sales order including the availabilty check for the sales orders. If it is not  fulfilled i need to reject the sales order creation.
    I am trying to search for the logic for the availabilty check of the sales order but i am not able to find one. Please help me out with that and also i need the user exit for the availabilty check for the sales orders. Please help me out with that one too.
    Regards,
    Sharadendu

    See this function Module for message type ORDERS
    IDOC_INPUT_ORDERS all validations are there in this Function Module .
    Please reward if useful.

  • Mixing latin and kyrillic characters for correspondence with PC User

    Hi!
    I (Mac, G5 Dual, OS 10.4.6) intend to exchange eMails via Mail with a friend (PC) who can help me to learn Russian. So I have to mix Latin with Kyrillic characters in the same mail. Is there an easy way to do this besides creating and sending pdf-files? Because if I use a kyrillic font he doesn't have the same font - and I am not sure anyway if the font information gets lost when he receives te mail.

    Is there an easy way to
    do this besides creating and sending pdf-files?
    Because if I use a kyrillic font he doesn't have the
    same font
    Fonts don't matter, only encodings. Just type your message using the US and Russian (or whatever) keyboard layouts and send it. Before sending, it might be best to go to Message > Text Encoding and choose Windows 1251 or KOI-8R. If you don't see these present, go to system prefs/international/langauges and add Russian (in cyrillic) to the list using the Edit button.
    For general info see:
    http://homepage.mac.com/thgewecke/TypingCyrillic.html

  • Changing Default Layout Setting - User-specific

    Dear Gurus,
    This is related to general ALV Layout setting. When we choose Select Layout -> Choose Layout, the default layout setting will show All, is there any way by which we can change this to User-specific  Layouts by default? (may be through some parameter id?).
    Many Thanks!
    Best Regards,
    Sree.

    Hi ,
    Can you explain me your requirement in detail.
    Regards,
    Rohan.

  • Badi and User Exit for AS01

    Hi Gurus,
    I need your assistance for the below requirement.
    In AS01 ( Create Asset ), while creating ASSET the Equipment should be created. This syncronization is already done in the customization.
    1.The requirement is the Equipment Field in the ALLOCATION Tab should automatically get the Asset Number Value once we click the ALLOCATION Tab.
    2.And also the Equipment should be created only if the Evaluation Group 2 is 'Y'.
    i checked all the Exits and BADI's available. But my requirement is not met. please help me in this.

    Hi,
    Transaction Code -               AS01          Create Asset Master Record
         Exit Name                    
         AAPM0001               Integration of asset accounting and site maintenance     
         AFAR0003               External changeover method     
         AFAR0004               Determination of proportional values for retirement     
         AINT0004               Change amount posted for certain areas     
         AINT0005               Dummy for extended syntax check. Do not use.     
         AISA0001               Assign Inventory Number     
         AIST0001               Exchange number range in master data maintenance     
         AIST0002               Customer fields in asset master     
         AMSP0002               Determine relationship type for two company codes     
         TRAN0001               User exit for asset transfer
    Reward points if useful....
    Regards
    AK

  • Status Profile and User Status  for Support Message

    Hi All,
    We need to customize Status Profile and User Status Specifc  to customer requriments.
    we need the following Status for Support Message:
    Open
    Accepted
    Rejected
    Fixed
    Retest
    Closed
    Note:
    1] Only the Message creator should be able Set staus Open and Closed
    2]  Message Processor should only set status Accepted, Rejected, Fixed and Retest
    I have created the Status Profile in BS02.
    Can some one help me the steps or guide how to implement the above logic and restrict the status access between Message Creator and Message Processor
    Thanks!
    Regards,
    Pradeep  L

    > 1] Do i have to create different Auth.key for Message processor and Message creator and then assing them in BS02 to Status Profile?
           Anand: Diffrent authorization key for different statues......not for message processor and creator
    > 2] Now how do i assign this Auth.Key to the Auth Object B_USERSTAT?
           Anand: Using Tcode PFCG, this can be done.... Consult Basis.....
    >     do i have to create a new Zrole and assign or is there any other way.
           Anand: Yes u need to create a Z role and include that authorization objects in that z role....
           so u might have to create 2 Zroles and then assign them to the persons concerned....
    Inspire ppl by rewarding
    Regards,
    Anand...

Maybe you are looking for